Privacy Policy Artwork to Income www.artworktoincome.com Effective Date: 28 June 2026

1. Introduction

Welcome to Artwork to Income ("we", "us", "our"), operated by Trina at www.artworktoincome.com. We are committed to protecting your personal information and being transparent about how we use it.

This Privacy Policy explains what data we collect, why we collect it, how we store and protect it, and what your rights are. It applies to all visitors, users, and customers of this website.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

The data controller responsible for your personal information is:

Trina, Artwork to Income Email: trina@ohshecreates.com Website: www.artworktoincome.com

If you have any questions about how we handle your data, please contact us using the details above.

3. What Information We Collect

We may collect the following personal information from you:

• First name

• Email address

• IP address

• Website usage data (via Google Analytics)

4. How We Collect It

We collect your information through:

• Opt-in forms on our website (for example, when you sign up to our email list or purchase a product)

• Google Analytics, which automatically collects certain technical data when you visit our website

5. Why We Collect It and Our Legal Basis

We only collect and use your personal data where we have a lawful basis to do so under UK GDPR. The purposes and corresponding legal bases are as follows:

• To send you emails, resources, and marketing content you have signed up for. Legal basis: consent (Article 6(1)(a) UK GDPR)

• To process and fulfil any purchases you make. Legal basis: contract (Article 6(1)(b) UK GDPR)

• To understand how visitors use our website and improve our content. Legal basis: legitimate interests (Article 6(1)(f) UK GDPR)

• To comply with any legal obligations we are subject to. Legal basis: legal obligation (Article 6(1)(c) UK GDPR)

6. Google Analytics

We use Google Analytics to help us understand how visitors interact with our website. This service collects data such as your IP address, browser type, pages visited, and time spent on the site. This data is aggregated and used for analytical purposes only.

Google Analytics may set cookies on your device. Please see our Cookie Policy for more information. You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-Out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

Google acts as a data processor on our behalf. For details on how Google handles data, please refer to Google's Privacy Policy at policies.google.com/privacy.

7. How Long We Keep Your Data

We only keep your personal data for as long as necessary for the purpose it was collected:

• Email marketing data is retained for as long as you remain subscribed. If you unsubscribe, your data is removed promptly from our active mailing list

• Purchase and transaction records are kept for up to 7 years to comply with UK tax and accounting obligations

• Website analytics data is retained in accordance with Google Analytics default retention settings

8. How We Protect Your Data

We take the security of your personal information seriously. The measures we have in place include:

• All systems containing personal data, including our email service provider, are protected by strong passwords

• Access to those systems is strictly limited to authorised individuals only

• Passwords are changed regularly as a precautionary measure

• Our devices have additional password protection to prevent unauthorised access

• We take reasonable daily precautions to protect your data from unauthorised access, modification, loss, or disclosure

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals without undue delay, as required by UK GDPR.

9. Sharing Your Data

We do not sell your personal information to any third party, and we never will.

We may share your data with trusted third-party service providers who help us operate our business, such as our email service provider and payment processors. These parties are only permitted to use your data to provide their services to us and are contractually required to keep it secure.

We may also disclose your information if required to do so by law or in response to a valid legal request.

10. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• The right to access the personal data we hold about you

• The right to have inaccurate data corrected

• The right to have your data erased in certain circumstances

• The right to restrict or object to how we process your data

• The right to data portability (to receive your data in a usable format)

• The right to withdraw consent at any time, where consent is the legal basis for processing

• The right to lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at trina@ohshecreates.com. We will respond within 30 days. There is no charge for making a request, and you may make requests as often as is reasonably necessary.

To contact the ICO directly: www.ico.org.uk or 0303 123 1113.

11. Email Marketing and Unsubscribing

If you have opted in to receive emails from us, you can unsubscribe at any time by clicking the unsubscribe link in any email we send you, or by emailing us directly at trina@ohshecreates.com. We will remove you from our list promptly.

We will never send you marketing emails without your prior consent.

12. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.

13. California Residents (CCPA)

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of your personal information.

We do not sell personal information. To exercise your California rights or make a request, please contact us at trina@ohshecreates.com.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page and, where the changes are significant, notify you via our website or by email.

We encourage you to review this policy periodically.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch:

Email: trina@ohshecreates.com Website: www.artworktoincome.com

We aim to respond to all enquiries within 30 days.

This policy was last reviewed and updated on 28 June 2026.